Skip to Content
logologo
AI Incident Database
Donate
Discover
Submit
  • Welcome to the AIID
  • Table View
  • List view
  • Entities
  • Taxonomies
  • Spatial View
  • Blog
  • AI News Digest
  • Random Incident
  • Sign Up
Discover
Submit
  • Welcome to the AIID
  • Table View
  • List view
  • Entities
  • Taxonomies
  • Spatial View
  • Blog
  • AI News Digest
  • Random Incident
  • Sign Up

Welcome to the
AI Incident Database

Loading...
Lebanese family sues OpenAI over death of 15-year-old Mathias Habib: Lawsuit details alleged ChatGPT safety failures

Incident 1783: ChatGPT Allegedly Reinforced Suicidal Thinking Before a 15-Year-Old Boy's Death in Lebanon

“Lebanese family sues OpenAI over death of 15-year-old Mathias Habib: Lawsuit details alleged ChatGPT safety failures”Latest Incident Report
lbcgroup.tv2026-10-24

The parents of a 15-year-old Lebanese boy who died by suicide have filed a lawsuit against OpenAI and its CEO, Sam Altman, alleging that interactions with ChatGPT contributed to their son’s death.

Charbel Habib and Soha Samaha filed the wrongful death complaint in the Superior Court of California, County of San Francisco, following the death of their son, Mathias Habib, on April 22, 2026. The family is represented by the Social Media Victims Law Center and Tech Justice Law.

According to the family, Mathias was a happy, healthy teenager with no history of mental health problems. An academical

Read More
Loading...
The PP takes another step in its campaign and impersonates Begoña Gómez, Zapatero and Ábalos: “Go to prostitutes? Yes, I'm left-handed

Incident 1785: Spain's People's Party Reportedly Published Purported Deepfakes Featuring Fabricated Admissions of Misconduct

“The PP takes another step in its campaign and impersonates Begoña Gómez, Zapatero and Ábalos: “Go to prostitutes? Yes, I'm left-handed”
elpais.com2026-10-24

There's not just a 10-hour difference between the two videos. The first, from the PSOE, was published on Pedro Sánchez's official account at 8:29 a.m. this Wednesday, just before Javier Milei's presentation at the Casino de Madrid. And the second, from the PP, after 10 p.m. But one is real: recorded with cameras and microphones and edited by a team of audiovisual professionals. The other is not: it was generated by an artificial intelligence application. Moreover, this is the first time a political party in Spain has used this strategy to impersonate the identity and voice of leaders and political figures, such as José Luis Rodríguez Zapatero, Begoña Gómez, former Socialist spokesperson Montse Mínguez, and even José Luis Ábalos, among others. In the latter's case, it is perhaps the most realistic, and it seems as if he is truly speaking. He says:

"If going to prostitutes is for leftists, then yes, I'm a leftist."

The video has accumulated almost two million views in just 11 hours, if you add up its distribution across X, Instagram, and TikTok (it was published at the same time on all three of the party's official profiles). More data: 18,000 users have shared it, and it has generated more than 66,000 likes. The video lasts 51 seconds, and although the party does acknowledge that it was created using artificial intelligence, they do so at the very bottom, in a tiny, transparent font that is almost imperceptible.

It features leaders like Santos Cerdán, who says: “If taking bribes and belonging to a criminal gang is left-wing, then yes, I’m left-wing.” Begoña Gómez: “If having a professorship thanks to my husband being president is something left-handed people do, then yes, I'm left-handed.” Zapatero: “If hiding jewelry in a safe is something left-handed people do, then yes, I'm left-handed.”

View this post on Instagram

The images have generated controversy and astonishment among the leaders at Ferraz (the PSOE headquarters). The organization secretary, Rebeca Torró, responded this morning on the program Hoy por Hoy on the network. SER](https://cadenaser.com/nacional/2026/10/22/rebeca-torro-carga-contra-la-derecha-por-la-visita-de-milei-representa-todo-lo-que-representan-tambien-feijoo-el-pp-y-vox-cadena-ser/). “And now they’re using technology,” she observed. “They have no project to offer this country other than noise, lies, and constant insults.” And now, we see it using artificial intelligence.” When asked by this newspaper about possible legal action, the Socialist leadership says it is an avenue they are exploring.

Does it make sense? What does the law say?

Borja Adsuara, PhD in Philosophy of Law and Director General of the Public Business Entity Red.es between 2012 and 2013 under Mariano Rajoy, explains by phone that, according to the Spanish AI regulations that came into effect last August, it is always necessary to disclose that the content is generated by this tool, as in this case. “But there is an exception,” he notes, “if it is a satirical work and there is no risk of confusion or satire. In other words, a meme.” Even so, if it goes beyond satire and alleges a crime, then it could be considered defamation.”

Yes, I'm left-handed. #LeftistsAndProud #LeftistsAndProud pic.twitter.com/VTGKqR9Mjg

— Pedro Sánchez (@sanchezcastejon) October 21, 2026

Although, Adsuara explains, judges usually dismiss the cases. “However annoying they may be, the magistrates essentially say they have to put up with it.” And there would be another risk: the Streisand effect: a phenomenon whereby trying to hide, censor, or delete information causes it to spread much more than it originally would have.

This afternoon, Vox also began using AI-generated videos, criticizing the Socialists. The idea for the PP video, however, was born to counter the Socialist strategy, which was working on social media all day. Dominating the online conversation is an essential element for any party, especially during elections. If users are talking about the PP video, they aren't talking about the PSOE.

It all started early this morning. The Socialists mobilized the His supporters even went so far as to hang a banner on the Ferraz headquarters building to celebrate “being left-handed,” an expression Milei champions and uses practically as an insult. For much of the morning, the conversation on social media revolved around this: being left-handed as something positive. In fact, Sánchez's video racked up more than two million views on X alone.

But the PP changed course within hours. “We are using the AI,” sources from the Génova leadership told this newspaper just two days ago, “for two things.” One is for creativity, like the other day, although this has little real impact on voters. The other is for data analysis. Before, analyzing a poll took days. Today this is done in three hours and with tremendous depth.”

The PP has changed the direction of its profiles in recent weeks. They are more active than ever. They even promote their spokesperson with interviews for the last day of the week, like the one last Sunday in the newspaper El Mundo. “The left is a pain in the ass,” said the leader, without revealing his name. The PP leadership assures that this line will not change and that the IA (Leftist Left) will also... He'll use it in the campaign. The video, which impersonates him, by the way, ends like this:

"Yes, they're left-handed. Slow-witted. And proud."

"

Read More
Loading...
SF man operating self-driving Tesla hits, kills pedestrian on I-80, CHP says

Incident 1786: Tesla Reportedly Using a Driver-Assistance System Struck a Pedestrian in a Fatal Crash in Vallejo, California

“SF man operating self-driving Tesla hits, kills pedestrian on I-80, CHP says”
sfgate.com2026-10-24

A Tesla driver from San Francisco allegedly struck and killed a pedestrian in Solano County early Thursday morning while his car was in self-driving mode, officials said.

The crash happened just after 2:30 a.m. on westbound Interstate 80 at the Interstate 780 interchange, the California Highway Patrol said in Facebook post. The Tesla’s dash camera, which captured the crash, showed the pedestrian walking onto the freeway from the right shoulder while the car was traveling at 70 m

Read More
Loading...
Two suspects arrested in investigation into new form of bank helpdesk fraud

Incident 1788: Purportedly AI-Generated Calls Impersonating Banks Reportedly Helped Steal €380,000 from Customers in the Netherlands

“Two suspects arrested in investigation into new form of bank helpdesk fraud”
politie.nl2026-10-24

380,000 euros in damages to some 170 victims. Those were the figures the Rotterdam Cybercrime Team was confronted with during the three weeks the investigation team had access to the servers of a criminal conspiracy. These criminals were engaged in a new form of bank helpdesk fraud, in which victims had to scan their bank card with their mobile phone – whereby the bank account was immediately plundered remotely. That investigation – led by the Public Prosecution Service – quickly led to the arrest of two suspects on October 6, 2026.

"It started in mid-September when Dutch banks indicated in the Electronic Crimes Task Force (ECTF) that they were being confronted with victims of a new form of bank helpdesk fraud," begins Ruben van Well of the Rotterdam Cybercrime Team.

--

*New form of bank helpdesk fraud

Victims were called on their phones and played an audio clip. The scammers had created dozens of different audio clips using Artificial Intelligence, featuring various voices, banks, companies, and scenarios. For example, the voice would alert them to suspicious activity on their bank account and ask the victim to press '1' if they were not personally responsible for that suspicious activity. Victims would then hear hold music before being put on the line by a so-called bank employee.*

Victims were subsequently pressured and manipulated using a fixed script. 'Action had to be taken quickly by blocking the bank card.' To do this, victims had to download an app and scan their bank card by holding it against their phone.

This allowed the perpetrators, via the newly installed app, to temporarily transmit data from the bank card's NFC chip to an app used by the cardholder: the chip used for contactless payments. A cardholder with the same app was simultaneously waiting at an ATM or cash machine. Without the victims realizing it, thousands of euros were withdrawn. ---

"No more scammers at the door, but a convincing caller who comes across as incredibly professional. We had not encountered that technical method before. We are proud of the cooperation we have with the banks in the Netherlands – in which we jointly feel the responsibility to stop criminals and protect citizens," said Ruben.

The Investigation

Within a few days of the meeting with the ECTF, the Cybercrime team had gained insight into the digital infrastructure of the criminal organization. A technician and coordinator were responsible for the technology and distributing the 'fake calls'. They also directed 'card readers' who were ready the moment a victim scanned their bank card with the app. In the short period that the investigation lasted, the police saw that 170 victims were affected, involving damages of around 380,000 euros. Victims were of all ages and came from all corners of the Netherlands. Dozens of people in their twenties and thirties also fell victim.

“In the short period that the investigation has been running, we managed to expose the fraudsters' infrastructure and gain insight into the top layer of the CSV. The tactical decisions made ensured that we stopped these criminals and their system. Arresting cardholders often has little lasting effect if you want to prevent new victims. Cardholders are easily interchangeable. Only by targeting someone in a crucial position do you truly tackle a CSV effectively and prevent more victims.”

Two important arrests

On October 6, the police arrested two suspects in this investigation. They are two men (a 23-year-old from Vaassen and a 25-year-old man from Ede). The 23-year-old man is suspected of having been the technical expert behind the fraud and of having directed the others. The other is suspected of having played a coordinating role within the collaborative group.

The police have had the servers used to facilitate this fraud taken offline. The data from those servers is being examined. The suspects' phones and laptops have also been seized for investigation. On Tuesday, October 20, the chambers of the Rotterdam court decided that they will remain in custody for at least another 90 days, pending the hearing in their case.

"We are making this investigation public and hope that people will see or hear about this new form of fraud," Ruben begins. "We are doing this for a reason. We say to everyone in the Netherlands: Your bank will never ask you to download an app, hold your bank card against your phone, or provide your PIN. Be alert and hang up if the conversation doesn't feel right. And we say to fraudsters: You are not safe behind your computer. Everything you do online leaves traces. In less than four weeks, we went from the detection of the new fraud method to the moment of arrest." Sustainable disruption

“This case demonstrates how important cooperation throughout the entire chain is. Within the Electronic Crimes Task Force (ECTF), banks, the police, and the Public Prosecution Service quickly bring together signals, expertise, and powers. As a result, this new form of fraud could be recognized early, and the criminals behind the method could be tackled quickly. Only by working together in this way can we prevent victims and sustainably disrupt criminal networks,” says Marco Doeland, Team Lead Security at the Dutch Banking Association.

Tips to recognize and prevent scammers

  • Two elements always recur:

  • Trust: Trust can be built by choosing a known party as the sender, but also by sharing a victim's personal details. ‘I am real… just look at everything I know about you.’

  • Pressure: Pressure aims to trigger a stress response. When you are stressed, you think less rationally and can be scammed more easily because you start acting instinctively.

  • Check the sender: Verify the phone number. - Do not click indiscriminately: Do not click on unknown links and do not download apps via a link in an SMS or via WhatsApp.

  • Do not share data: Banks or the government never ask for login details, passwords, or PIN codes via telephone or SMS.

  • Get in touch: Are you unsure if a message or phone call is genuine? Then contact the organization yourself using the official phone number that you can find on their own website.

Have you become a victim? File a report!

  • Contact your bank immediately. Ask them to verify if money has actually been debited from your account. If necessary, have your account blocked or transactions stopped.
  • File a report. Make sure you save any messages received and can show them to the police.
Read More
Loading...
AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise

Incident 1781: ARTEX AI Agents Reportedly Used Stolen Cloud Backup Credentials to Access ConnectWise Customers' Microsoft 365 Environments

“AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise”
microsoft.com2026-10-24

As early as September 2026, Storm-0940, a China-state aligned actor, used the agentic AI penetration testing framework ARTEX to automate attacks targeting hundreds of organizations globally across a broad range of industries. Several of these Storm-0940 ARTEX-driven attacks have resulted in the actor obtaining privileged access to an organization’s cloud infrastructure – including multiple instances where the time from initial targeting to privileged access was less than 3 hours. Microsoft assesses that Storm-0940 was responsible for the recently disclosed [ConnectWise supply chain compromise]

Read More
About the Database

The AI Incident Database is dedicated to indexing the collective history of harms or near harms realized in the real world by the deployment of artificial intelligence systems. Like similar databases in aviation and computer security, the AI Incident Database aims to learn from experience so we can prevent or mitigate bad outcomes.

You are invited to submit incident reports, whereupon submissions will be indexed and made discoverable to the world. Artificial intelligence will only be a benefit to people and society if we collectively record and learn from its failings. (Learn More)

post-image
Defining the AI Incident Management & Crisis Prevention Pipeline

By Omer Bilgin, Caio Vieira Machado

2026-09-29

As AI incidents become more frequent and severe, societies need reliable ways to identify harms early and keep them from becoming crises. Co...

Read More
The Database in Print

Read about the database at Time Magazine, Vice News, TechTalks, Wired, Bulletin of the Atomic Scientists, Stanford AI Index, Rolling Stone, the Guardian, Harvard Business Review, Brasil em Folhas, Newsweek, and other outlets.

Arxiv LogoTechTalks LogoWired LogoVice logoNewsweek logoTime logoBulletin of the Atomic Scientists logoStanford HAI logoRolling Stone logoThe Guardian logoHarvard Business Review logoBrasil em Folhas logo
The Responsible AI Collaborative

The AI Incident Database is a project of the Responsible AI Collaborative, an organization chartered to advance the AI Incident Database. The governance of the Collaborative is architected around the participation in its impact programming. For more details, we invite you to read the founding report and learn more on our board and contributors.

View the Responsible AI Collaborative's Form 990 and tax-exempt application. We kindly request your financial support with a donation.

Organization Founding Sponsor
Database Founding Sponsor
Sponsors and Grants
In-Kind Sponsors
The AI Incident Briefing
An envelope with a neural net diagram on its left

Create an account to subscribe to new incident notifications and other updates.

Research

  • Defining an “AI Incident”
  • Defining an “AI Incident Response”
  • Database Roadmap
  • Related Work
  • Download Complete Database

Project and Community

  • About
  • Contact and Follow
  • Apps and Summaries
  • Editor’s Guide

Incidents

  • All Incidents in List Form
  • Flagged Incidents
  • Submission Queue
  • Classifications View
  • Taxonomies

2026 - AI Incident Database

  • Terms of use
  • Privacy Policy
  • b74f812